Oops - that was a phishing test.

You clicked a test link from the security team. There was no real attack - but here's what should have tipped you off.

• Sender address. Look at the text after the "@", not at the friendly display name.
• Time pressure. "Act immediately" is a classic trick to switch off your thinking.
• Deceptive link. Hover over it - the real address is often different.
• Password request. Legitimate services don't ask you to log in through a link in an email.